What is CVE-2022-20777?

CVE-2022-20777 is a critical-severity vulnerability in Cisco Enterprise Nfv Infrastructure Software, classified under Improper Access Control. CVSS score: 9.9/10. Published 2022-05-04.

How severe is CVE-2022-20777?

Critical severity. CVSS v3 base score is 9.9 out of 10.

Vulnerability in Cisco Enterprise Nfv Infrastructure Software

CVE-2022-20777

Multiple vulnerabilities in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an attacker to escape from the guest virtual machine (VM) to the host machine, inject commands that execute at the root level, or leak system data…

EPSS: 0.036 (88.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.9 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.

Affected products

Cisco Enterprise Nfv Infrastructure Software — versions n/a

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

20220504 Cisco Enterprise NFV Infrastructure Software Vulnerabilities (vendor-advisory, x_refsource_CISCO)
github.com/orangecertcc/security-research/security/advisories/GHSA-v56f-9gq3-rx… (x_refsource_MISC)

Frequently asked questions

What is CVE-2022-20777?: CVE-2022-20777 is a critical-severity vulnerability in Cisco Enterprise Nfv Infrastructure Software, classified under Improper Access Control. CVSS score: 9.9/10. Published 2022-05-04.
How severe is CVE-2022-20777?: Critical severity. CVSS v3 base score is 9.9 out of 10.